This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          9VujQcE2ZFiskFBtCLkR18shUDCcg0dq/FqcEesePd0=
Subject key identifier:   96:FE:67:34:E0:ED:26:A1:2F:D8:27:5D:53:76:04:26:16:DC:D6:51
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       019AF3892482B3AA9EEF5EAED6CF37CE80CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          178F
Signing time:             Sat 06 Dec 2025 12:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:42 +0000
Files and hashes:         1: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (hash: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=)
                          2: 21b6ntDP_41WHw4JgmJy5QMFjgw.roa (hash: OyGhDdjF1Bm2rSEG2L631phdq3gbyPG0iQYpMEVeFPo=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: 5eGfaltYjezYyjRREkWtJVBTHmQPl3EvMSS1atoroGQ=)
                          4: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (hash: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=)
                          5: 7p384sXqxwddixUy_mYYBxF3awU.roa (hash: shaUQH6DkAjCcH24QCvbbVnJZikn1zAyihmMsgzPJcI=)
                          6: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (hash: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=)
                          7: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (hash: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=)
                          8: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (hash: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=)
                          9: NZS2Ipchg2nhjy9FYCa-tr7edgc.roa (hash: J91+10sEZiq3a/L3jz4R1QTQGfsCXE1VL5KiBPRPpK8=)
                          10: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (hash: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=)
                          11: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (hash: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=)
                          12: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (hash: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=)
                          13: WXqBRwyxEDgQK5OlFrSMIaFpyVU.roa (hash: IpP8TaM5Wwj7+VayyaCIeA2tv6VLqBIorB1uda3TPMs=)
                          14: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (hash: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=)
                          15: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (hash: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=)
                          16: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (hash: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=)
                          17: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (hash: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=)
                          18: kQOaGpW4jD-8xGlNbkC3aZmZ2oA.roa (hash: nAfr6WTUGifpmHx8/uBqTFl3/GkMakZU6HzPC4BRKRc=)
                          19: nqNpqxiiesheCCeqK53xQj3S098.roa (hash: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=)
                          20: qg9H3rvWINznh7UPHplQbVY73BM.roa (hash: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=)
                          21: uMSALwCFCjHgfXY8GtxojOClYFk.roa (hash: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:24:82:b3:aa:9e:ef:5e:ae:d6:cf:37:ce:80:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Dec  6 12:00:42 2025 GMT
            Not After : Dec  7 12:00:42 2025 GMT
        Subject: CN=96fe6734e0ed26a12fd8275d5376042616dcd651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:ec:b8:34:e7:52:1a:d1:20:3f:ec:68:08:
                    0a:a4:42:7e:97:99:86:a1:28:d2:fc:6f:c1:76:d8:
                    c0:69:34:9a:a9:33:52:56:67:8d:85:12:53:57:a7:
                    e0:15:4c:57:c8:f6:aa:7f:e1:60:2a:8f:9a:41:2a:
                    7d:7c:4f:58:c3:e1:13:af:70:87:91:33:cf:62:fc:
                    3f:09:ed:fe:30:01:c6:25:d4:54:9d:9b:9e:de:a6:
                    c7:a6:a6:29:9b:24:da:19:b6:5b:03:e7:e2:99:35:
                    40:50:b2:3a:ff:3c:84:ed:42:40:6c:4f:89:71:a1:
                    c1:4e:ca:d9:25:e1:89:31:7e:fb:4f:02:ee:b5:61:
                    bb:74:6d:f4:e7:16:c3:62:87:74:7f:a0:21:04:85:
                    f2:cb:a5:11:98:80:a7:ce:a7:d6:dc:51:36:c5:15:
                    e4:c0:5c:6b:dc:e2:0a:1f:41:1d:46:66:67:98:3b:
                    1b:dd:28:2f:cd:43:92:49:2e:2e:5a:a6:39:cc:b7:
                    d8:fc:68:77:fd:6c:a5:48:b3:d8:55:b2:2d:4f:ba:
                    1c:66:f0:c6:04:06:1d:2d:7a:67:82:97:a0:2a:0d:
                    aa:91:b6:09:ea:3d:21:d4:52:95:3c:87:c1:11:27:
                    f4:e2:b8:4d:d7:b7:83:60:c8:a9:d7:e0:b3:de:44:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FE:67:34:E0:ED:26:A1:2F:D8:27:5D:53:76:04:26:16:DC:D6:51
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c3:ae:45:42:e9:30:96:6a:b0:9f:07:9f:cd:22:51:75:a0:
         56:2d:a7:13:e3:a0:c4:fd:d2:0e:c5:91:4a:c0:10:21:23:04:
         aa:42:b2:ee:e0:1b:d5:e7:6e:c4:85:b0:a2:c0:74:f4:0d:31:
         bf:87:dc:f7:24:88:91:5c:ba:6c:38:5e:cd:3f:23:27:e4:8d:
         90:5d:c5:2c:46:b1:4e:5c:4b:db:60:46:e4:6b:71:a5:70:68:
         b2:d8:b3:5c:cb:65:2c:44:f5:e3:5a:33:9f:88:28:fd:d4:11:
         e9:d9:cb:ac:a4:01:4c:41:70:55:1a:2d:91:7d:e7:88:d2:31:
         48:f1:99:92:27:b2:8f:ef:05:91:a1:96:a1:e5:61:97:8a:68:
         da:eb:39:93:59:5d:5b:6f:59:bc:19:dd:3d:04:58:b9:8b:49:
         0b:dd:76:2c:af:f3:f7:a6:a5:74:a3:14:2f:c0:4e:e0:b1:ee:
         35:28:16:33:69:38:c4:62:e6:13:14:83:19:2e:4c:9d:6e:dc:
         62:91:64:33:22:9a:2c:62:08:e9:4e:ef:e4:2f:c5:34:7b:af:
         3e:da:5b:63:58:a9:a5:0b:76:79:da:71:0b:ba:d7:ce:6c:25:
         5c:80:e5:5b:4b:1c:fb:80:92:04:77:bc:16:aa:78:01:82:60:
         27:9d:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:15:07 2025 by rpki-client